System and method for detecting ATM fraud using a force sensor

ABSTRACT

Systems and methods for ATM fraud detection are presented. ATM fraud detection may be provided in the context of including a currency sensor in the ATM to count currency notes. ATM fraud detection may be obtained by using a currency sensor, such as a scanner, to image and count any currency notes that remain after being dispensed to a user, and determining if the count is correct for the currency notes dispensed. A count discrepancy resulting from removal of some but not all dispensed currency notes would indicate attempted theft or fraud.

CROSS-REFERENCE TO RELATED APPLICATIONS

This application is a continuation of U.S. patent application Ser. No.17/010,537 filed Sep. 2, 2020, which is a continuation of U.S. patentapplication Ser. No. 16/688,105 filed Nov. 19, 2019, now U.S. Pat. No.10,796,537, the complete disclosures of which is incorporated herein byreference in their entireties.

FIELD OF THE DISCLOSURE

The present disclosure relates generally to automated teller machine(ATM) technology and, more specifically, to exemplary systems andmethods for detecting attempted fraudulent activity aimed at automatedteller machines.

BACKGROUND

An ATM is an electromechanical device that allows banking customers orusers to carry out financial transactions without the need for a humanteller. For example, customers may use an ATM to access their bankaccounts, deposit, withdraw, or transfer funds, check account balances,or dispense items of value. Generally, to use an ATM, the customer mayinsert a banking card containing an account identifier, such as amagnetic stripe, into the ATM's card reader, and authenticate the cardby entering a personal identification number (PIN). Once the card hasbeen read and authenticated, the customer can carry out variousfinancial transactions, including withdrawal of cash from the ATM thatwould be deducted from the bank account.

In cash withdrawal transactions, the ATM will proceed to dispense therequested cash, for example via a cash port. If the customer isforgetful or becomes distracted, the customer may neglect to remove thecash from the cash port, and the unremoved cash may be retracted by theATM without deducting the amount from the customer's account. In someinstances, however, thieves have fraudulently taken some of the cashbefore retraction—typically by removing some of the bills or notes fromthe middle of the stack, leaving some of the cash behind to mislead theATM into retracting the remaining cash and not deducting any amount fromthe customer's account. This results in losses to the bank or ATM host.

Thus, it may be beneficial to provide exemplary systems and methodswhich identify such fraud by detecting the removal of some, but not alldispensed cash to overcome at least some of the deficiencies describedherein.

SUMMARY

Aspects of the disclosed technology include systems and methods for ATMfraud detection. ATM fraud detection may be provided in the context ofusing a currency sensor to image and count any currency notes thatremain after being dispensed to a user, and determining if the count iscorrect for the currency notes dispensed; any removed bills would resultin a count discrepancy. In this way, ATM fraud attempts may be detected.This provides an advantage over current ATM technology which lacks theability to detect this form of ATM fraud.

Embodiments of the present disclosure provide an automated tellermachine (ATM) comprising: a currency dispenser configured to dispensecurrency notes to a user; a currency sensor; and a processor configuredfor data communication with the currency dispenser and the currencysensor; wherein, any currency notes remaining in the currency dispenserafter being dispensed to the user are retracted; and wherein, theprocessor is configured to determine the count of the retracted currencynotes.

Embodiments of the present disclosure provide a method of detecting ATMfraud, comprising: receiving a withdrawal request from a user via aninput device; retrieving currency notes from a currency cassette;presenting the currency notes to the user via a currency dispenser;retracting some or all of the presented currency notes via the currencydispenser; scanning the retracted currency notes; and comparing thecount of the retracted currency notes to a count of the currency notesretrieved from the currency cassette.

Embodiments of the present disclosure provide an ATM fraud detectionsystem, comprising: a currency cassette containing currency notes; acurrency dispenser configured to receive currency notes from thecurrency cassette and present the currency notes to a user; a currencysensor configured to scan the currency notes presented to the user; anda processor configured for data communication with the currencydispenser and the currency sensor; wherein the currency dispenser isconfigured to retract the currency notes upon receiving a command fromthe processor, wherein the currency sensor is configured to scan thecurrency notes retracted by the currency dispenser, and wherein theprocessor is configured to compare the count of the currency notespresented to the user and the count of the currency notes retracted bythe currency dispenser, and to determine a fraud condition if the countof the presented currency notes differs from the count of the retractedcurrency notes.

Further features of the disclosed design, and the advantages offeredthereby, are explained in greater detail hereinafter with reference tospecific example embodiments described below and illustrated in theaccompanying drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a diagram of an ATM fraud detection system according to one ormore example embodiments.

FIGS. 2A-2D illustrate interactions between components of an ATM frauddetection system according to one or more example embodiments.

FIG. 3 is a flowchart illustrating a method of ATM fraud detectionaccording to one or more example embodiments.

FIGS. 4A-4B present a flowchart illustrating a method of ATM frauddetection according to one or more example embodiments

DETAILED DESCRIPTION

The following description of embodiments provides non-limitingrepresentative examples referencing numerals to particularly describefeatures and teachings of different aspects of the invention. Theembodiments described should be recognized as capable of implementationseparately, or in combination, with other embodiments from thedescription of the embodiments. A person of ordinary skill in the artreviewing the description of embodiments should be able to learn andunderstand the different described aspects of the invention. Thedescription of embodiments should facilitate understanding of theinvention to such an extent that other implementations, not specificallycovered but within the knowledge of a person of skill in the art havingread the description of embodiments, would be understood to beconsistent with an application of the invention.

Exemplary embodiments of the disclosed systems and methods provide forATM fraud detection through use of a currency sensor, such as, e.g., ascanner, to count any dispensed cash that remains and determining ifthere is a count discrepancy from any removed bills resulting fromattempted theft or fraud. Benefits of the disclosed technology mayinclude improved fraud prevention and improved user experience.

FIG. 1 shows a diagram illustrating an ATM fraud detection system 100according to one or more example embodiments. As discussed furtherbelow, system 100 may include card reader 110, visual display 120,currency dispenser 120, currency cassette 130, currency sensor 140,force sensor 145, storage container 150, application 160, processor 170,memory 180, and/or communications interface 190. ATM system 100 maycommunicate with a bank or other backend processing system (not shown)via a network (not shown). Although FIG. 1 illustrates certaincomponents, system 100 may include additional or multiple componentsconnected in various ways. It is understood that not all embodimentsinclude every component shown in FIG. 1 . It is also understood that,while FIG. 1 depicts a single instance of each component, embodimentsmay contain multiple instances of any components.

Card reader 110 may be any device configured to detect the presence of acard within the ATM of system 100. Card reader 110 may include a cardsensor and/or a near field communication (NFC) reader. Card reader 110may be configured to read and authenticate an account-linked cardassociated with a user (such as an account holder). Card reader 110 maybe in data communication with processor 170 and configured to providethe processor with a card notification when a card is inserted into orremoved from the card reader or is tapped against the card reader.

System 100 may include a visual display 115 for displaying a graphicaluser interface to a user. Visual display 115 may include any type ofdevice for presenting visual information such as a computer monitor,video monitor, a flat panel display, touch screen display, or a mobiledevice screen, and may include technology such as, for example, liquidcrystal display, light-emitting diode (LED) display, plasma panel,and/or a cathode ray tube display technology. Visual display 115 may bein data communication with processor 170. System 100 may further includean input device (not shown), which may include any device for inputtinginformation, commands or data, such as, e.g., a keypad, keyboard,electronic pen, touch screen interface, microphone, etc. System 100 mayfurther include an output device (such as, e.g., speaker or indicatorlights) providing information or alerts. In some embodiments, theinput/output devices may be incorporated in whole or in part with visualdisplay 115 (such as, e.g., a touch screen display). Any input or outputdevice(s) may be in data communication with processor 170.

System 100 may also include, or be in data communication with, animaging device (not shown) such as, e.g., a digital camera, videorecorder, or camcorder. The imaging device may be positioned to captureor record images within the vicinity of ATM system 100, such as, forexample, capturing images of a user as the user may be using the ATM ofsystem 100. The imaging device may be in data communication withprocessor 170 and configured to capture or record images upon command orsignal initiated by processor 170. As used herein, a command may includea signal.

Currency dispenser 120 may include a device to dispense (e.g., presentor deliver) currency notes to a user. Currency dispenser 120 may includeone or more electro-mechanical components such as, e.g., one or morebelts, one or more gears, one or more motors, and/or one or more platesor trays. Currency dispenser 120 may include one or more sensors todetect presence, position and/or movement of currency notes. Currencynotes to be dispensed may be placed or positioned within currencydispenser 120. The particular placement or positioning of currency notesmay depend on the particular configuration of currency dispenser 120.For example, if currency dispenser 120 includes a belt, currency notesmay be placed on the belt; as another example, if currency dispenser 120includes a tray, currency notes may be placed in the tray. Currencydispenser 120 may include a cash port or cash opening through whichcurrency notes are presented for the user to physically remove from theATM of system 100. Currency dispenser 120 may be configured to detectthe presence and/or absence of currency notes, which may indicate when auser removes, or fails to remove, currency notes which have beendispensed to the user. Currency dispenser 120 may be in datacommunication with processor 170, and may operate pursuant to commandsor signals from processor 170. Currency dispenser 120 may be configuredto send a notification or signal to the processor when the user removescurrency notes from the ATM device.

System 100 may include one or more currency cassettes 130. Each currencycassette 130 may be configured to hold a plurality of currency notes tobe dispensed to users. Each currency cassette 130 may hold currencynotes of a different denomination/value (e.g., face value) than notesheld in other currency cassettes that may be contained in the ATM ofsystem 100. Each currency cassette 130 may be in data communication withprocessor 170. Currency notes to be dispensed via currency dispenser 120may be obtained by retrieving currency notes from one or more currencycassettes 130; the process of retrieving currency notes may includetransferring the currency notes to currency dispenser 120. Retrieval ofcurrency notes from one or more currency cassettes 130 may be performedupon command or signal from processor 170.

Currency sensor 140 may be implemented in a plurality of ways, includingas an optical sensor, a weight sensor, and a stack count sensor. In someexamples, currency sensor 140 may be an optical sensor, which may be anydevice configured to scan and count one or more currency notes and/orcapture image data for each scanned note. In these examples, a scannermay be incorporated within currency dispenser 120 such that any currencynotes within currency dispenser 120 may be scanned and counted. Ascanner may include, e.g., a small digital camera along with a lightsource positioned behind and/or on top of a currency note. For example,if currency dispenser 120 includes a tray, the optical currency sensor140 may be mounted on, integrated with or otherwise arranged such thatany currency notes on the tray may be scanned. In some embodiments, thecurrency sensor 140 may be arranged adjacent to or in the vicinity ofcurrency dispenser 120 such that any currency notes within currencydispenser 120 may be scanned. In some embodiments, the currency sensor140 may be in a fixed position relative to other components, such thatscanning may occur based on activating currency sensor 140 to captureimage data as currency notes may be in position or in motion withincurrency dispenser 120. Currency sensor 140 may include or incorporate adigital image sensor, an infrared sensor, an ultraviolet sensor, and/ora sensor which detects reflectivity for security bands within a currencynote. Currency sensor 140 may provide data in the form of image data foreach currency note scanned. Image data may include data from one ormultiple sensors (such as, e.g., visual image data, infrared data,ultraviolet data, and/or reflectivity data) and may include multipleimages from both sides of the note. Currency sensor 140 may be in datacommunication with processor 170. In some embodiments, another countingdevice (not shown) may be used in addition to, or in place of, currencysensor 140.

In some examples, the currency sensor 140 may be a weight sensor. Inthese examples, the currency sensor may include one or more elementsconfigured to measure weight, such as a strain gauge and a deflectionsensor. The weight sensor may function to determine the number of billsbased on their weight, and may be in data communication with processor170. In addition, the weight sensor may be integrated with, orcomplementarily arranged with, the force sensor 145.

In some examples, the currency sensor 140 may be a stack count sensor.In these examples, the stack count sensor may include one or moreelements configured to detect the number of bills using one or moredetection mechanisms. Exemplary detection mechanisms may include a lightoutput and light sensor configured to direct a light beam towards a billand monitor for interruptions of the beam, one or more wheels comprisinggrips or grooves to separate and manipulate bills, and/or an opticalpattern sensor. The stack count sensor may be in data communication withprocessor 170.

The currency sensor 140 may be implemented as a combination of one ormore of the foregoing sensors, such as one or more of the opticalsensor, the weight sensor, and the stack count sensor. Theimplementation of the currency sensor may vary based on the structureand functionality of ATM 100, including the number of currency types andthe number of denominations handled by the ATM 100. Thus, ATM 100 mayrequire a different currency sensor implementation and/or a differentnumber of currency sensors if it is configured to handle only bills of acertain type or denomination, e.g., U.S. $20 bills, than if it isconfigured to handle multiple currency types and multiple denominations.For example, if ATM 100 is configured to handle only a certain type anddenomination of currency, determining a bill's face value may not benecessary and a determination of the number of bills or the weight of astack of bills may be sufficient. In contrast, if ATM 100 is configuredto handle multiple types and/or multiple denominations of currency,determining a bill's face value may be necessary.

Force sensor 145 may be any device configured to detect forces on one ormore currency notes as the notes are being dispensed to a user. Forcesensor 145 may include, e.g., a strain gauge, deflection sensor, etc.,and may be incorporated with currency dispenser 120. For example, ifcurrency dispenser 120 includes a cash port, force sensor 145 may bemounted on, integrated with or otherwise arranged such that any forcesapplied to the currency notes within the cash port (such as, e.g.,attempts to manually manipulate the notes) may be detected. Force sensor145 may be in data communication with processor 170. As another example,force sensor 145 may be operably connected to currency dispenser 120, indata communication with processor 170, and force sensor 145 may detectany forces applied to the currency dispenser 120 (e.g., pushing forcesand pulling forces). In some examples, the processor 170 may issue analert if force sensor 145 detects a pushing force for longer than apredetermined time period.

Storage container 150 may be any container within the internal structureof ATM 100 configured to store currency notes. Storage container 150 maybe used as a receptacle to store currency notes that may be retracted,or otherwise removed from currency dispenser 120. In some embodiments,storage container 150 may be a secure container such that access tonotes stored therein may be accessed only via a key or security code,etc. In some embodiments, a second currency sensor 140 may be mountedon, integrated with or otherwise arranged with storage container 150such that any currency notes in the container may be scanned andcounted. In some embodiments, ATM system 100 may accept currency notesdeposited by a user. In some embodiments, ATM system 100 may include adeposit port (not shown) through which a user may deposit currency notesinto the ATM. In some embodiments, currency notes deposited by a usermay be placed in storage container 150. In some embodiments, currencynotes deposited by a user may be scanned by currency sensor 140 oranother currency sensor.

Application 160 may include a software application or executable programcode stored in memory 180 to be executed on processor 170, and beconfigured to carry out features described herein for any of the ATMdevices described herein. Application 160 may be configured, forexample, to transmit and/or receive data with other devices viacommunications interface 190 of ATM device 100. For example, application160 may be configured to initiate or respond to one or more requestsand/or to send or receive messages, such as requests or messagesinvolving requests to withdraw currency notes from ATM 100. Application160 may also be configured to/provide a user interface via visibledisplay 115. Further features carried out by application 160 aredescribed below with reference to FIG. 2 .

Processor 170 may include one or more processing devices such as amicroprocessor, RISC processor, ASIC, etc., and may include associatedprocessing circuitry. Processor 170 may include, or be connected to,memory (such as memory 180) storing executable instructions and/or data,as may be necessary or appropriate to control, operate or interface withthe other features of ATM system 100, including application 160 or anyother applications running on ATM system 100. Processor 170 (includingany associated processing circuitry) may contain additional componentsincluding processors, memories, error and parity/CRC checkers, dataencoders, anticollision algorithms, controllers, command decoders,security primitives and tamperproofing hardware, as necessary to performthe functions described herein.

Memory 180 may include read-only memory, write-once read-multiple memoryand/or read/write memory, e.g., RAM, ROM, and EEPROM, including anycombination thereof. Memory 180 may store executable instructions and/ordata, as may be necessary or appropriate to control, operate orinterface with the other features of ATM system 100, including anyapplications running on ATM system 100.

Communications interface 190 may include wired or wireless datacommunication capability. Communications interface 190 may be configuredfor data communication between ATM system 100 and other devises, suchas, e.g., servers, back-end systems, mobile devices, etc., over anetwork and protocol common to such devices. These capabilities maysupport data communication with a wired or wireless communicationnetwork, including the Internet, a wide area network (WAN), a local areanetwork (LAN), a wireless personal area network, a wide body areanetwork, a cellular network, a telephone network, any other wired orwireless network for transmitting and receiving a data signal, or anycombination thereof (including, e.g., a WiFi network or corporate LAN).Communications interface 190 may support communication via a short-rangewireless communication field, such as Bluetooth, NFC, or RFID, and mayinclude a reader, such as a NFC reader.

Communications between ATM system 100 and other devices may be encryptedor decrypted using any suitable cryptographic method. In someembodiments, processor 170 may encrypt data (e.g., account data) priorto transmitting data to other devices, using any suitable cryptographicmethod. Communication between devices may include any methods used fordata communication over a network, including, for example, a textmessage, an e-mail, or other messaging techniques appropriate in anetwork-based configuration. Communication methods may include anactionable push notification with an application stored on a mobiledevice.

FIGS. 2A-2D illustrate interactions between components of an ATM frauddetection system according to one or more example embodiments, withreference to components and features described above including but notlimited to the figures and associated description. These interactionsmay include commands, signals or data exchanged between processor 170and other components, including currency sensor 140, of ATM system 100.

Referring to FIG. 2A, at block 202 ATM system 100 may receive from auser a request to withdraw currency notes from the ATM. The user'srequest to withdraw currency notes may be received via an input deviceon the ATM. The input device may be in data communication with processor170. As described above, an input device may include any device forinputting information, commands or data, such as, e.g., a keypad,keyboard, electronic pen, touch screen interface, microphone, etc. Forexample, a menu of commands may be presented to the user via touchscreen display and interface upon insertion of an account-linked cardinto card reader 110 by the user.

At block 204, processor 170 may issue a command to retrieve currencynotes and transfer the currency notes to currency dispenser 120. Thecurrency notes to be dispensed may be retrieved from one or morecurrency cassettes 130, and may be positioned within currency dispenser120; positioning of the retrieved currency notes may be based on theparticular configuration of currency dispenser 120. The currency notesretrieved may be selected to satisfy the user's withdrawal request, asdescribed further below with reference to FIG. 2B.

At block 206, processor 170 may issue a scan command to currency sensor140 to scan the currency notes transferred to currency dispenser 120(e.g., such as described above with reference to FIG. 1 ); the scancommand may include a read command to read data from currency sensor140. As described above, currency sensor 140 may be incorporated orpositioned within currency dispenser 120. In some embodiments, currencysensor 140 may be configured to activate to scan notes within currencydispenser 120 only upon a command. In some embodiments, currency sensor140 may be configured to activate and scan notes within currencydispenser without receiving a command, e.g., currency sensor 140 may bealways active or may activate on a periodic basis, or may otherwiseactivate upon signal from another component. A read command may allowprocessor 170 to read data from currency sensor 140.

At block 208, processor 170 may receive data from currency sensor 140.Receipt of data from currency sensor 140 may be responsive to the scancommand (block 206), which may be or include a read command, or toanother signal. The currency sensor data relates to currency noteswithin currency dispenser 120 to be dispensed.

At block 210, processor 170 may determine the count of the currencynotes to be dispensed based on the data received from currency sensor140. In some embodiments, the processor 170 may determine the value ofthe currency notes to be dispensed based on the data received fromcurrency sensor 140, which may include image data for each of thecurrency notes. For example, the denomination of each imaged currencynote may be determined from the image data, and the value of thecurrency notes to be dispensed may be determined by summing thedenomination as determined for each of these currency notes. In someembodiments, processor 120 may receive data or signals from anothercounting device and use such data or signals to determine the count ofthe currency notes to be dispensed.

With reference to FIG. 2B, at block 222, ATM system 100 may receive froma user a request to withdraw currency notes from the ATM, as describedabove with reference to block 202 (FIG. 2A).

At block 224, the currency notes to be retrieved from the currencycassette(s) and dispensed to the user may be selected to satisfy theuser's withdrawal request. The number and denomination of currency notesto be retrieved may depend upon the amount (value) of currency requestedby the user to be withdrawn, and/or the availability of currency notesof a certain denomination in a currency cassette. For example, if theuser requests withdrawal of one hundred dollars ($100.00), and if thesystem has a currency cassette with available currency notes of twentydollar ($20) denomination, the system may retrieve five currency notesof twenty dollar ($20) denomination. As another example, if the userrequests withdrawal of fifty dollars ($50.00), and if the system has acurrency cassette with available currency notes of twenty dollar ($20)denomination and another currency cassette with available currency notesof ten dollar ($10) denomination, the system may retrieve two currencynotes of twenty dollar ($20) denomination and one currency note of tendollar ($10) denomination. As another example, if the user requestswithdrawal of fifty dollars ($50.00), and if the system has a currencycassette for currency notes of twenty dollar ($20) denomination, butthat cassette is empty, and another currency cassette with availablecurrency notes of ten dollar ($10) denomination, the system may retrievefive currency notes of ten dollar ($10) denomination. It will beunderstood that other combinations of currency denomination selectionsmay be made to satisfy a user's request.

At block 226, processor 170 may determine the count of the currencynotes to be dispensed based on the selected currency notes, withoutscanning or receiving data from currency sensor 140. The expected numberof currency notes to be retrieved and dispensed (N) is determined basedon the selection of currency notes, as described above with reference toblock 224, by summing the number of currency notes of each denominationselected. The expected value of the currency notes to be dispensed wouldbe the same as the amount (value) requested for withdrawal.

With reference to FIG. 2C, at block 242 processor 170 may send a commandto dispenser 120 to dispense the retrieved currency notes to the user.In response, the retrieved currency notes within currency dispenser(described above with reference to block 204) may be presented to theuser via currency dispenser 120. As described above, currency dispenser120 may include a cash port or cash opening through which currency notesare presented for the user to physically remove from ATM system 100.

At block 244, processor 170 may receive a signal from currency dispenser120 regarding the presence or absence of currency notes in currencydispenser 120. As described above, currency dispenser 120 may beconfigured to detect the presence and/or absence of currency notes,which may indicate when a user removes, or fails to remove, currencynotes which have been dispensed to the user. For example, the signal mayindicate that the currency dispenser is not empty, meaning that some orall of the dispensed currency notes remain within currency dispenser120. In some embodiments, currency dispenser 120 may be configured toissue a signal only when the dispenser is empty, meaning the absence ofa signal may indicate that some or all of the dispensed currency notesremain in currency dispenser 120. In some embodiments, processor 170 maywait a predetermined time period after the currency notes have beenpresented to the user before determining the presence or absence of asignal from currency dispenser 120, in order to allow the user time toremove the currency notes from ATM system 100. If the user removes allof the dispensed currency notes, such that no currency notes remainwithin currency dispenser 120, the transaction operation may be deemedcomplete, subject to any action required to debit or otherwise adjustthe user's account by the amount (e.g., dollar value) of currency notesdispensed, and the system may reset for the next transaction.

At block 246, it may have been determined that one or more currencynotes remain within currency dispenser 120 (as described above withreference to block 244), which may indicate the user simply forgot toremove all of the currency notes, or may indicate a potentiallyfraudulent condition (e.g., intentional removal of some, but not all,currency notes). Accordingly, processor 170 may issue a command toretract the dispensed currency notes. Retracting of the currency notesmay be performed by currency dispenser 120; for example, currencydispenser 120 may reverse the electromechanical action involved inpresenting the currency notes for removal by the user. After retracting,the currency notes are no longer in position to be physically removedfrom ATM system 100. Instead, the retracted currency notes may bepositioned within the internal structure of ATM system 100. In someembodiments, the retracted currency notes may remain positioned withincurrency dispenser 120. In some embodiments, the retracted currencynotes may be transferred to storage container 150. In some embodiments,the retracted currency notes may be transferred to the respectivecurrency cassette(s) corresponding to the denomination of each retractedcurrency note.

At block 248, processor 170 may issue a scan command to currency sensor140 to scan the retracted currency notes; the command may include a readcommand to read data from currency sensor 140. As described above,currency sensor 140 may be incorporated or positioned within currencydispenser 120. In some embodiments, currency sensor 140 may beconfigured to activate to scan notes within currency dispenser 120 onlyupon a command. In some embodiments, currency sensor 140 may beconfigured to activate and scan notes within currency dispenser withoutreceiving a command, e.g., currency sensor 140 may be always active ormay activate on a periodic basis, or may otherwise activate upon signalfrom another component. A read command may allow processor 170 to readdata from currency sensor 140. In some embodiments, a second currencysensor 140 may be incorporated or positioned within storage container150, in which case processor 170 would issue the command to, and readdata from, the second currency sensor 140, as appropriate, in the samemanner as described above.

At block 250, processor 170 may receive data from the appropriatecurrency sensor 140. The currency sensor data relates to retractedcurrency notes which may be positioned within currency dispenser 120 orwithin storage container 150 (block 246), and receipt of data from theappropriate currency sensor 140 may be responsive to the scan command(block 248), which may be or include a read command, or to anothersignal.

At block 252, processor 170 may determine the count of the retractedcurrency notes based on the data received from the appropriate currencysensor 140 (block 250). In some embodiments, the processor 170 maydetermine the value of the retracted currency notes based on the datareceived from currency sensor 140, which may include image data for eachof the retracted currency notes. For example, the denomination of eachimaged currency note may be determined from the image data, and thevalue of the retracted currency notes may be determined by summing thedenomination as determined for each of these currency notes. In someembodiments, processor 120 may receive data or signals from anothercounting device and use such data or signals to determine the count ofthe retracted currency notes.

With reference to FIG. 2D, at block 262 processor 170 may send a commandto dispenser 120 to dispense the retrieved currency notes to the user.In response, the retrieved currency notes within currency dispenser(described above with reference to block 204) may be presented to theuser via currency dispenser 120. As described above, currency dispenser120 may include a cash port or cash opening through which currency notesare presented for the user to physically remove from ATM system 100.

At block 264, processor 170 may issue a scan command to currency sensor140 to scan the currency notes within currency dispenser 120; thecommand may include a read command to read data from currency sensor140. As described above, currency sensor 140 may be incorporated orpositioned within currency dispenser 120. In some embodiments, currencysensor 140 may be configured to activate and scan notes within currencydispenser 120 only upon a command. In some embodiments, currency sensor140 may be configured to activate and scan notes within currencydispenser without receiving a command, e.g., currency sensor 140 may bealways active or may activate on a periodic basis, or may otherwiseactivate upon signal from another component. A read command may allowprocessor 170 to read data from currency sensor 140. In someembodiments, processor 170 may wait a predetermined time period afterthe currency notes have been presented to the user before issuing a scancommand to currency sensor 140.

At block 266, processor 170 may receive data from the appropriatecurrency sensor 140. The currency sensor data relates to currency noteswhich may be positioned within currency dispenser 120, and receipt ofdata from currency sensor 140 may be responsive to the scan command(block 264), which may be or include a read command, or to anothersignal.

At block 268, processor 170 may determine the count of the currencynotes (if any) based on the data received from currency sensor 140(block 266). In some embodiments, the processor 170 may determine thevalue of the currency notes based on the data received from currencysensor 140, which may include image data for each of the currency notes.For example, the denomination of each imaged currency note may bedetermined from the image data, and the value of the currency notes maybe determined by summing the denomination as determined for each ofthese currency notes. If the resulting count is zero, this wouldindicate that the user removed all of the dispensed currency notes fromcurrency dispenser 120. In some embodiments, processor 120 may receivedata or signals from another counting device and use such data orsignals to determine the count of the currency notes. As described belowwith reference to FIG. 4 , the count (or value, if determined) ofretrieved currency notes to be dispensed may be validated by comparingto the expected count (or value) of the retrieved currency notes.

FIG. 3 is a flowchart illustrating a method of ATM fraud detection 300according to one or more example embodiments, with reference tocomponents and features described above including but not limited to thefigures and associated description. ATM fraud detection method 300 maybe carried out by components of ATM system 100 (including, e.g., viaapplication 160 executing in conjunction with processor 170).

At block 310, ATM system 100 may receive from a user a request towithdraw currency notes from the ATM. The user's request to withdrawcurrency notes may be received via an input device on the ATM, asdescribed above with reference to block 202 (FIG. 2A).

At block 320, the system may retrieve currency notes from one or morecurrency cassettes 130 and the retrieved currency notes may be placed inposition within currency dispenser 120, as described above withreference to FIG. 2A. The number and denomination of currency notesretrieved from the currency cassette(s) may depend upon the amount ofcurrency requested by the user to be withdrawn, and/or the availabilityof currency notes of a certain denomination in a currency cassette, asdescribed above with reference to block 224 (FIG. 2B).

At block 330, the retrieved currency notes (block 320) may be presentedto the user via currency dispenser 120, as discussed above withreference to blocks 242-244 (FIG. 2C). A signal from currency dispenser120 may indicate the presence or absence of currency notes in currencydispenser 120, as discussed above with reference to block 244.

At block 340, some or all of the presented currency notes may beretracted, such that they are no longer available for removal by theuser, as described above with reference to block 246 (FIG. 2C).

At block 350, the retracted currency notes may be counted, as describedabove with reference to blocks 248-252 (FIG. 2C).

At block 360, the count of the retracted currency notes (block 350) maybe compared to the count of the currency notes retrieved and presentedto the user. The count of the currency notes retrieved and presented tothe user may be based on a counting process applied to the retrievednotes, as described above with reference to FIG. 2A. In someembodiments, the count of the currency notes retrieved and presented tothe user may be based on the expected count of such notes, as describedabove with reference to block 226 (FIG. 2B). If the result from thecomparison is that the count of the retracted currency notes is the sameas the count of the dispensed currency notes, then it may be determinedthat there is no fraud condition resulting from the user's failure toremove all of the dispensed currency notes. Accordingly, the transactionmay be deemed complete, subject to any action required to credit orotherwise adjust the user's account by the amount (e.g., dollar value)of currency notes retracted (e.g., if previously debited), and thesystem may reset for the next transaction.

At block 370, if the result from the comparison (block 360) is that thecount of the retracted currency notes is different from the count of thedispensed currency notes, then it may be determined that there is apotential fraud condition resulting from the apparent removal of somebut not all of the dispensed currency notes. Upon such a determination,ATM system 100 may issue a fraud alert (as described further below withreference to FIG. 4B).

FIGS. 4A-4B present a flowchart illustrating a method of ATM frauddetection 400 according to one or more example embodiments, withreference to components and features described above including but notlimited to the figures and associated description. ATM fraud detectionmethod 400 may be carried out by components of ATM system 100(including, e.g., via application 160 executing in conjunction withprocessor 170).

At block 410, ATM system 100 may receive from a user a request towithdraw currency notes from the ATM. The user's request to withdrawcurrency notes may be received via an input device on the ATM, asdescribed above with reference to block 202 (FIG. 2A)

At block 415, the system may retrieve currency notes from one or morecurrency cassettes 130 and the retrieved currency notes may be placed inposition within currency dispenser 120, as described above withreference to FIG. 2A. The number and denomination of currency notesretrieved from the currency cassette(s) may depend upon the amount ofcurrency requested by the user to be withdrawn, and/or the availabilityof currency notes of a certain denomination in a currency cassette, asdescribed above with reference to block 224 (FIG. 2B).

At block 420, the retrieved currency notes may be counted prior to beingpresented to the user, as described above with reference to blocks206-210 (FIG. 2A). In some embodiments, the value of the retrievedcurrency notes may be determined, as described above with reference toblock 210.

At block 425, the count (or value, if determined) of the retrievedcurrency notes to be dispensed (block 420) may be validated, bycomparing to the expected count (or value) of the retrieved currencynotes. The expected count (or value) may be determined as describedabove with reference to block 226 (FIG. 2B). If the result of thecomparison is that the count (or value, if determined) of the retrievedcurrency notes (block 420) is the same as the expected count (or value),then the count (or value) of the retrieved currency notes to bedispensed may be deemed validated.

At block 430, once the retrieved currency notes (block 415) in currencydispenser 120 are ready for dispensing, the retrieved currency notes maybe presented to the user via currency dispenser 120 as discussed abovewith reference to blocks 242-244 (FIG. 2C).

At block 435, the system may check to determine whether any of thepresented currency notes remain within currency dispenser 120 for morethan a predetermined time period. A signal from currency dispenser 120may indicate the presence or absence of currency notes in currencydispenser 120, as discussed above with reference to block 244 (FIG. 2C).If the user removes all of the presented currency notes, such that nocurrency notes remain within currency dispenser 120, the transactionoperation may be deemed complete, subject to any action required todebit or otherwise adjust the user's account by the amount (e.g., dollarvalue) of currency notes dispensed, and the system may reset for thenext transaction. If the user does not remove all of the presentedcurrency notes within a predetermined time period after being presentedto the user, it may be determined that one or more currency notes remainwithin currency dispenser 120 for more than a first predetermined timeperiod, and the process may continue at block 450.

At block 440, while the currency notes are being presented to andavailable for removal by the user, a signal or data may be received fromforce sensor 145, indicating the presence of an unusual or excessivepushing, pulling or twisting force. The presence of such a force lastingfor more than a predetermined time period may be indicative of anattempt to defraud by, e.g., improperly attempting to remove a portion,but not all, of the dispensed currency notes or improperly attempting toreplace larger denomination currency notes with smaller denominationcurrency notes. Continuous large and prolonged detected force may alsoindicate that it is difficult to remove the notes from the machine andmay warrant a repair or inspection of the ATM.

At block 450, it has been determined (a) that one or more currency notesremain within currency dispenser 120 for more than a first predeterminedtime period, and/or (b) that an unusual or excessive pushing or pullingforce lasting for more than a second predetermined time period ispresent. In either case, the event may indicate a potentially fraudulentcondition. Accordingly, any remaining currency notes may be retracted toa position within the internal structure of ATM system 100, such thatthey are no longer available for removal by the user, as described abovewith reference to block 246 (FIG. 2C).

At block 460, an image or images of the user may be captured by animaging device such as, e.g., a digital camera, video recorder, orcamcorder. The imaging device may be positioned on or in the vicinity ofATM system 100 such that the imaging device can capture or record imagesof a user while the user is attempting to use ATM system 100 or isotherwise within the vicinity of ATM system 100. For example, theprocessor may issue a command or signal to the imaging device to causethe imaging device to begin capturing images of the user as the user maybe using ATM system 100. A command or signal to the imaging device torecord user images may be issued upon detection of one or more potentialfraud events as described above (e.g., with reference to blocks 435 and440).

At block 465, the retracted currency notes may be counted, as describedabove with reference to blocks 248-252 (FIG. 2C). In some embodiments,the value of the retracted currency notes may be determined, asdescribed above with reference to block 252.

At block 470, the count (or value, if determined) of the retractedcurrency notes (block 465) may be compared to the count (or value, ifdetermined) of the retrieved/dispensed currency notes (actual count, asin block 420, or expected count, as in block 226). If the result fromthe comparison is that the count (or value, if determined) of theretracted currency notes is the same as the count (or value, ifdetermined) of the retrieved/dispensed currency notes, then it may bedetermined that there is no fraud condition resulting from the user'sfailure to remove all of the dispensed currency notes. If there is nopotential fraud condition relating to the force sensor (block 440), thetransaction may be deemed complete, subject to any action required tocredit or otherwise adjust the user's account by the amount (e.g.,dollar value) of currency notes retracted (e.g., if previously debited),and the system may reset for the next transaction.

At block 475, if the difference resulting from the comparison (block470) is that the count (or value, if determined) of the retractedcurrency notes is different from the count (or value, if determined) ofthe dispensed currency notes, then it may be determined that there is apotential fraud condition resulting from the apparent removal of somebut not all of the dispensed currency notes. Furthermore, if there hasbeen detected an unusual or excessive force (block 440), there may bedetermined a potential fraud condition relating to the force sensor.

At block 480, if there is (a) a potential fraud condition resulting fromthe apparent removal of some but not all of the dispensed currencynotes, and/or (b) a potential fraud condition relating to the forcesensor, a fraud alert may be issued by ATM system 100. In someembodiments, a fraud alert may include one or more of outputting a soundalarm, illuminating one or more lights, displaying message on screen,etc. In some embodiments, a fraud alert may include sending a fraudalert message to a bank or other account manager, ATM operator, etc. Afraud alert message may provide information about the potential fraudevent, including information identifying the user, the date/time of thetransaction, count or value data, force data, results of any orcomparisons, and/or images obtained, etc.

In some embodiments, when notes are scanned, data from currency sensor140 (including data from any infrared or ultraviolet sensor, magneticink sensor, and metal thread sensor) may be used to detect the presenceof one or more counterfeit notes. For example, if retracted currencynotes are scanned, the data from currency sensor 140 (including datafrom any infrared or ultraviolet sensor, magnetic ink sensor, and metalthread sensor) may be compared to stored data to determine if a scannednote fails to match any known currency notes, or the data from currencysensor 140 (including data from any infrared or ultraviolet sensor) maybe examined to identify the presence or absence of markers that wouldordinarily be present for legitimate currency notes. This may includeexamining the data for presence of a watermark or reflection of securitybands in the scanned notes. Upon detection of one or more counterfeitnotes, an alert (such as the fraud alert described above, or a separatecounterfeit alert) may be issued.

In some embodiments, when notes are scanned, data from currency sensor140 (including data from any infrared or ultraviolet sensor) may be usedto detect or record the serial numbers for the scanned notes. Forexample, if retracted currency notes are scanned, the data from currencysensor 140 (including data from any infrared or ultraviolet sensor) maycontain the serial numbers, or image data of the serial numbers, whichmay be communicated to processor 170 and recorded (e.g., stored) forlater analysis, etc. Optical character recognition may be employed todetect numbers (e.g., serial numbers) in scanned currency notes.Similarly, when currency notes retrieved from currency cassette(s) to bedispensed are scanned, the data from currency sensor 140 (including datafrom any infrared or ultraviolet sensor) may contain the serial numbers,or image data of the serial numbers, which may be communicated toprocessor 170 and recorded (e.g., stored) for later analysis, etc.

The description of embodiments in this disclosure provides non-limitingrepresentative examples referencing figures and numerals to particularlydescribe features and teachings of different aspects of the disclosure.The embodiments described should be recognized as capable ofimplementation separately, or in combination, with other embodimentsfrom the description of the embodiments. A person of ordinary skill inthe art reviewing the description of embodiments should be able to learnand understand the different described aspects of the disclosure. Thedescription of embodiments should facilitate understanding of thedisclosure to such an extent that other implementations, notspecifically covered but within the knowledge of a person of skill inthe art having read the description of embodiments, would be understoodto be consistent with an application of the disclosure

Throughout the specification and the claims, the following terms take atleast the meanings explicitly associated herein, unless the contextclearly dictates otherwise. The term “or” is intended to mean aninclusive “or.” Further, the terms “a,” “an,” and “the” are intended tomean one or more unless specified otherwise or clear from the context tobe directed to a singular form.

In this description, numerous specific details have been set forth. Itis to be understood, however, that implementations of the disclosedtechnology may be practiced without these specific details. In otherinstances, well-known methods, structures and techniques have not beenshown in detail in order not to obscure an understanding of thisdescription. References to “some examples,” “other examples,” “oneexample,” “an example,” “various examples,” “one embodiment,” “anembodiment,” “some embodiments,” “example embodiment,” “variousembodiments,” “one implementation,” “an implementation,” “exampleimplementation,” “various implementations,” “some implementations,”etc., indicate that the implementation(s) of the disclosed technology sodescribed may include a particular feature, structure, orcharacteristic, but not every implementation necessarily includes theparticular feature, structure, or characteristic. Further, repeated useof the phrases “in one example,” “in one embodiment,” or “in oneimplementation” does not necessarily refer to the same example,embodiment, or implementation, although it may.

As used herein, unless otherwise specified the use of the ordinaladjectives “first,” “second,” “third,” etc., to describe a commonobject, merely indicate that different instances of like objects arebeing referred to, and are not intended to imply that the objects sodescribed must be in a given sequence, either temporally, spatially, inranking, or in any other manner.

While certain implementations of the disclosed technology have beendescribed in connection with what is presently considered to be the mostpractical and various implementations, it is to be understood that thedisclosed technology is not to be limited to the disclosedimplementations, but on the contrary, is intended to cover variousmodifications and equivalent arrangements included within the scope ofthe appended claims. Although specific terms are employed herein, theyare used in a generic and descriptive sense only and not for purposes oflimitation.

This written description uses examples to disclose certainimplementations of the disclosed technology, including the best mode,and also to enable any person skilled in the art to practice certainimplementations of the disclosed technology, including making and usingany devices or systems and performing any incorporated methods. Thepatentable scope of certain implementations of the disclosed technologyis defined in the claims, and may include other examples that occur tothose skilled in the art. Such other examples are intended to be withinthe scope of the claims if they have structural elements that do notdiffer from the literal language of the claims, or if they includeequivalent structural elements with insubstantial differences from theliteral language of the claims.

What is claimed is:
 1. A fraud detection system, comprising: a currencydispenser in an automated teller machine (ATM), the currency dispenserconfigured to dispense currency notes; a force sensor configured todetect a force applied to the currency dispenser; and a processor indata communication with the force sensor and the currency dispenser,wherein, upon detection by the force sensor of a force applied to thecurrency dispenser for longer than a predetermined time period, theprocessor is configured to issue an alert.
 2. The fraud detection systemof claim 1, wherein the force sensor comprises a strain gauge.
 3. Thefraud detection system of claim 1, wherein the force sensor comprises adeflection sensor.
 4. The fraud detection system of claim 1, wherein thecurrency dispenser comprises at least one selected from the group of abelt and a tray.
 5. The fraud detection system of claim 4, wherein theforce sensor is configured to detect the force on the at least oneselected from the group of the belt and the tray.
 6. The fraud detectionsystem of claim 1, wherein the force sensor is integrated into thecurrency dispenser.
 7. The fraud detection system of claim 1, furthercomprising an imaging device configured to capture an image in responseto a command from the processor.
 8. The fraud detection system of claim7, wherein the processor is configured to issue the command upondetection of the force for longer than the predetermined time period bythe force sensor.
 9. The fraud detection system of claim 7, wherein theimaging device is configured to capture an image of a vicinity of thesystem.
 10. The fraud detection system of claim 7, wherein the imagingdevice is configured to capture an image of a user in a vicinity of thesystem.
 11. The fraud detection system of claim 1, wherein: the frauddetection system further comprises a weight sensor, the currencydispenser is further configured to, after dispensing currency notes,retract one or more remaining currency notes, the weight sensor isfurther configured to, prior to the retraction of the one or moreremaining currency notes: measure a weight of the one or more remainingcurrency notes, and determine a number of the one or more remainingcurrency notes based on the weight of the one or more remaining currencynotes.
 12. The fraud detection system of claim 11, wherein: the frauddetection system further comprises a stack count sensor, and the stackcount sensor is further configured to, prior to the retraction of theone or more remaining currency notes, detect the number of the one ormore remaining currency notes using a detection mechanism.
 13. The frauddetection system of claim 12, wherein the detection mechanism comprisesat least one selected from the group of a light output and light sensor,a wheel comprising grips or grooves, and an optical pattern sensor. 14.A method of detecting fraud, comprising: presenting, by a currencydispenser in an automated teller machine (ATM), one or more currencynotes; detecting, by a force sensor, a force applied to the currencydispenser; issuing, by a processor, an alert upon detection of the forceapplied to the currency dispenser for longer than a predetermined timeperiod; and retracting, by the currency dispenser, any remainingcurrency notes of the one or more currency notes.
 15. The method ofclaim 14, further comprising applying optical character recognition todetect serial numbers of the retracted one or more currency notes. 16.The method of claim 14, further comprising detecting a presence of awatermark or a security band in the retracted one or more currencynotes.
 17. The method of claim 16, further comprising, upon a failure todetect the presence of a watermark or a security band in the retractedone or more currency notes, issuing a counterfeit alert.
 18. The methodof claim 14, wherein issuing the alert comprises transmittinginformation comprising at least one selected from the group ofinformation identifying a user, a date of the presentation of the one ormore currency notes, a time of the presentation of the one or morecurrency notes, a count of the one or more currency notes, a value ofthe one or more currency notes, a strength of the force, and theduration of the force.
 19. A non-transitory computer-accessible mediumhaving stored thereon computer-executable instructions, wherein uponexecution by an automated teller machine (ATM) comprising a processor, acurrency dispenser, and a force sensor, the instructions cause the ATMto perform procedures comprising: presenting, by the currency dispenser,one or more currency notes; detecting, by the force sensor, a forceapplied to the currency dispenser; upon detection by the force sensor ofthe force for longer than a predetermined time period, issuing, by theprocessor, an alert; and retracting, by the currency dispenser, anyremaining currency notes of the one or more currency notes.
 20. Thenon-transitory computer-accessible medium of claim 19, wherein: the ATMfurther comprises an imaging device, and the procedures furthercomprise: issuing, by the processor, a command to the image sensor, andcapturing, by the image sensor responsive to the command, an image of avicinity of the ATM.